This is an automated email from git. It was generated because a ref change was pushed to the "chrony/chrony.git" repository.
The branch, master has been updated via 87df2687236f1b3d87b96f6242cd531657a1de6c (commit) via 17a9caf5c88e2cfdfc3ce18565a23f86407a2a3f (commit) via 36441fabde4be126d6f3d3c2c5b84f212119667b (commit) via f363998517e377a7cd27a2046909682f3b503552 (commit) via 6fc30baba8419e7183a9e1ad63663fc40f384b06 (commit) via 70a0f18d52b1a4a8964cdbb64a6c04e2a9a5bd72 (commit) via 0ad5f5ea89f0bbe4bdb9cb0ebc65be9699241098 (commit) via d676f39b847028f4d25988c8160408d802df6a43 (commit) from 31690261f51939e7c9caac09bf5b6e12989b371d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 87df2687236f1b3d87b96f6242cd531657a1de6c Author: Miroslav Lichvar <mlich...@redhat.com> Date: Wed Sep 1 16:33:41 2021 +0200 test: update compilation tests commit 17a9caf5c88e2cfdfc3ce18565a23f86407a2a3f Author: Miroslav Lichvar <mlich...@redhat.com> Date: Thu Sep 2 09:56:48 2021 +0200 cmac: add gnutls support Similarly to hashing, add support for AES-CMAC in gnutls to avoid linking directly with nettle. commit 36441fabde4be126d6f3d3c2c5b84f212119667b Author: Miroslav Lichvar <mlich...@redhat.com> Date: Thu Sep 2 11:44:15 2021 +0200 hash: allow non-security MD5 use in FIPS mode gnutls running in the FIPS140-2 mode does not allow MD5 to be initialized, which breaks chronyd using MD5 to calculate reference ID of IPv6 addresses. Specify a new hash algorithm for non-security MD5 use and temporarily switch to the lax mode when initializing the hash function. commit f363998517e377a7cd27a2046909682f3b503552 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Wed Sep 1 14:46:38 2021 +0200 hash: add gnutls support Add support for crypto hash functions in gnutls (internally using nettle). This can be useful to avoid directly linking with nettle to avoid ABI breaks. commit 6fc30baba8419e7183a9e1ad63663fc40f384b06 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Thu Sep 2 10:36:03 2021 +0200 configure: fix SIV detection in gnutls gnutls_aead_cipher_init() is declared in gnutls/crypto.h. If the compiler handles implicit declarations as errors, the SIV support was not detected. Fix the check to use the correct header. commit 70a0f18d52b1a4a8964cdbb64a6c04e2a9a5bd72 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Thu Sep 2 09:56:58 2021 +0200 siv: deinit gnutls on unsupported SIV commit 0ad5f5ea89f0bbe4bdb9cb0ebc65be9699241098 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Thu Sep 2 13:27:23 2021 +0200 privops: allow binding to PTP port Fixes: be3158c4e5b2 ("ntp: add support for NTP over PTP") commit d676f39b847028f4d25988c8160408d802df6a43 Author: Miroslav Lichvar <mlich...@redhat.com> Date: Wed Sep 1 14:44:48 2021 +0200 doc: improve ptpport example ----------------------------------------------------------------------- Summary of changes: cmac_gnutls.c | 189 ++++++++++++++++++++++++++++++++++++++++ configure | 39 +++++++-- doc/chrony.conf.adoc | 2 +- hash.h | 1 + hash_gnutls.c | 145 ++++++++++++++++++++++++++++++ hash_intmd5.c | 2 +- hash_nettle.c | 3 + hash_nss.c | 3 + hash_tomcrypt.c | 3 + privops.c | 4 +- siv_gnutls.c | 5 +- test/compilation/002-scanbuild | 1 + test/compilation/003-sanitizers | 3 +- test/unit/hash.c | 9 +- util.c | 2 +- 15 files changed, 397 insertions(+), 14 deletions(-) create mode 100644 cmac_gnutls.c create mode 100644 hash_gnutls.c hooks/post-receive -- chrony/chrony.git -- To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" in the subject. For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the subject. Trouble? Email listmas...@chrony.tuxfamily.org.